Origin Protocol is a suite of complementary DeFi products designed to increase economic opportunity for all. These permissionless and composable smart contracts provide superior user experiences across DeFi in a groundbreaking multichain yield ecosystem.
PoC Required
Vault program
Arbitration enabled
Codebase
The Assets in Scope list is the source of truth. An asset is covered only at the address and on the chain shown in the list. If the same address is deployed on more than one chain, each deployment must be listed separately.
For proxies, the implementation active when the report was submitted is covered through the listed proxy. Researchers do not need a separate entry for that implementation, but must demonstrate the impact through the production proxy or against user funds held by the implementation itself.
The contract registry and repositories are references only and do not add assets to scope. Undeployed contracts and test deployments are not covered.
External tokens, pools, lending markets, bridges, withdrawal queues, oracles, validators, and other third-party systems are not Origin assets unless listed. A vulnerability in Origin's integration with one of these systems can still qualify through the affected Origin contract.
Except for Smart Contract Critical reports that qualify under Primacy of Impact as described in the Rewards section, unlisted assets are not covered. High, Medium, and Low impacts against unlisted assets remain ineligible.